Natas8

Website URL: http://overthewire.org/wargames/natas/natas8.html

According to the data on the OverTheWire webpage.

Username: natas8
URL:      http://natas8.natas.labs.overthewire.org

Let’s log into the URL for Natas7

Let’s try and open both the pages.

Note that the page variable is sent to the server through GET method. The parameter is there in the URL. Well, I for one can’t figure out anything from here right now. Let’s check out the source code.

Great, that hints at the location. Let’s try to feed the path for the location of the password i.e. /etc/natas_webpass/natas8.

Done!

Password for next level: DBfUBfqQG69KvJvJ1iAbMoIpwSNQ9bWe